UNCLASSIFIED //FDUQ^ 


Not applicable - this system is only paper-based. 


UNCMSSIFIED // 
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UNCLASSIFIED //JpUjf 

10. Is this system/project the subject of an OMB-300 budget submission? 

X NO 

_YES If yes, please provide the date and name or 

title of the OMB submission: 

11. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53? 

_X_NO 

_YES If yes, please describe the data mining function: 

12. Is this a national security system (as determined by the SecD)? 

X_NO _YES 

13. Status of System/ Proj ect: 

_ This is a new system/ project in development. [If you checked this block, 

STOP. The FLA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/proj ect developed? 

■isi. i 


2. Has the system/project undergone any significant changes since April 17, 2003? 
_ NO [If no, proceed to next question (II.3).] 

X YES If yes, indicate which of the following changes were involved (mark all 
boxes that apply): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 


UNCLASSIFIED // 




UNCLASSIFIED // 


_A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_XX_ Changes do not involve a change in the type of records 

maintained, the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

X NO _YES 


If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

_NO _YES 

[The PTA is now complete and after division approvai(s) should be submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 


UNCL^MjFIED //>OU£f 
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UNCLASSIFIED 


OGC/FCLU IRev. 047>B'2(BI) 

FBI PRIVACY 'THRESHOLD ANALYSIS (FTA) 

\ v\fr r\> rr m hamu i: : oa \ kdm k mA 

BI.KR FBI Unique Asset Eh _ 


Denrved Fs'Pio; 

^wr xt fra no i h\ 

CkABed By; 

\ ' 0 1 1 

Bresson; 

Systems Security Office; 

DeehsysBy O.o: 

Program Office: Security (Squad 13) 


Division: .Albany 


Phone:) ' 1 


Room Number: 326 


FBI OGC/FCLU I 
Name:! . 


i Room Number: 7 


VISION 1NTERMEOIATK APPROVALS 



Program .Manager (or other appropriate 
executiveas Division determines; 

Division PCvs-cy Off seer 

'Program Division: 

Dm s | | v 

\ v s N y T X ^\ \ 

Albany lucid Office 


Date signed: A/'VB d 

impest do ision nanus 

x " ' 1___1 

Name: Paul M. Holstein 


rude: Chief Security Officer 

Title: Chief Division CouT-sd\Cnkt 

UO ' ffikor 

FBi'BQ Division: 

Signature: 

SigiUiUue: 

Bovest stivkkm sanud 

Dak signed; 

Dshe signed: 


Name. 

Name: 


Title: 



After ob dmDon sspgrovpffi kr'oon-d signed k;rb copy plus eDeiropic copy to FBI OGC7PO..C (JEM 7750). 

CThe FBI Privacy and Civil F Denies Officers diUermmaboes. conditions and/or tkm approve! sviij Pc recorded o<5 A 
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u'M'moNs 


.PiA Is required by iJ-c F-Govenmiem Act 

Pi A Is to be completed as a matter of FBLDOJ discretion, 

X PI A n; not required tor the following reasonls); 

X System does not collect, maintain, or disseminate Pit. 

System is grand [lathered (at existence before d/1 7/2003; no late? changes posing slgro Scant privacy risks ; 
Information in the system relates to interna! governmenr operations. 

System has been previously assessed under an evaluation sun Sarto a PlA. 

No significant privacy issues (or privacy issues are unchanged). 

Other; 


Applicable SORNis): . 

Notify FBI RMD/RIPS per MKX? 190.2.3? .No .Yes--See sample EC on PCI..U intranet websue hem 

bt?p://home/IX)o;)GC/!/t.B/IX.'l..l t/lolvacyClvil%20l.,lberties%20I.Jbrary/tonn or; nSogl 00-2-3 ee.svyd 

SORN/SORN revisi?rn(s} required ^' No Yes; 

Prepare/reviseGdd Privacy Act (e)l 3) statements Oar related forms? No .Yes; 


RECORDS. The program should consult with RAID to identsly/resolve any federal reeofoyleiectrome records issues. 
The system may contain Federal records whether or not it contains Privacy Act rebaeX* and : in any event, a records 
sehedtde approved by the National Archives and Records Adrnln-stration Is necessary, RM.D cart provide advice ost this 

as well as on compliance with requirements for Electronic Recordkeeping Certdimtdon and an y necessary updates. _ 

Other; 


□ X s -. 


Privacy and Civil Liberties hOdc 


Safnafun 
Date Sist 


Brian P. Birsney, Acting Deptrty Genera; Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: / 
.Date SimtedY: 
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2. Does the systernmrqlcct collect. maintain. or disseminate any information about 
individuals toe., a human being or nan-mi person, regardless of nationality}? 

.X.NO 

(Note: It is theoretically possible to open the tiles that are contained on the inserted media. 
However, there is no way to save the information in them, print their contents, or transfer 
the contents to another system.) 

YDS |If yes, please coofmoed 

3. Please indicate if any of the following characteristics apply to the information In the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Cheek ah that. apply.; 

The Information directly identifies sow.die individuals. 

t he information is intended to he used, in corimnction with other data elements, 
to indirectly identify specific individuals. 

The Information can be used to distinguish or trace art individual's identity (he., it 
is linked or linkable to specific individuals;. 

If yon marked any of the above, proceed to Question 4, 

None of the above, if none of the above, describe why the it: torn an too does not 
identify specific individuals either directly or indirectly. 

4. Does the system-protect pertain only to government employees, contractors, or 
consultants? 

.NO YtX 

5. Is information about famed States citizens or lawfully admitted permanent resident 
aliens retrieved from the systcmfptpieef by name or other persona; identifier 9 

NO, |I.f no. skip to rpwstion ?.f 


fm. i av-w p y 
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NO fit' to, proceed to question 7,f 
.YHS 

assessments': 

NO 

b. Are subjects of information bom vvhoot the tnUe'rnatum is directly collected 
provided a written Privacy Act AM if; statement (cuhe? on the collection term or via a 
separate notice)' 7 

NO {The program will need to work with PCI,!.' to develap/intipkment 
the necessary ha otNPl 

YES Identify am- forms, paper or electronic, nsed to reqoesi sndi 
Information from the inforomtioa subject; 

?. Are Social Security Numbers ; SSNst collected, maintained or disseminated iron'; the 
systern/ptsbeet? Fud SSNs should only be used as identifiers in hooted instances. 


.SSNs are necessary to esuOHsieeonirnn the identity of subjects.. victims. 

vitnesses or sources in this law enforcement ;.a -ntchlacnee oeUvitv. 


SSNs are necessary to tdenchv FBI personnel in this internal administrate 




.The s\ ss.nrv protect pros 

encrypted, hidden from ad user 
users), Describe; 


L SSNs are 
e to certain 
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.It 'is nor. ieasibD 

>\\n 1 \sdam 


No, 


.Yes. tniormation systems operated by contrunoo; tor the f Bl may be 

considered Privacy Act :.p steam oi records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PH and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations mAh the 

system tor the FBI. 


has the system undergone 
Security Division l Sec Of.' 




NO If no, indicate reason; if Ch&A is pending, provide nedclpa 

completion dale: 

YES If yes 5 please indicate the following, d" known; 

Provide date of last C&A cerlifleatkin/rememfkaBon; 
Confidentiality;; Low Moderate High Undefined 

Integrity:: Low Moderate high Undefined 

Availahifity: Low.Moderate Jdign.Undefined 

Not applicable • this system is only poper-based. 


Does the system conduct data mining as desmed in Section 504 of the 
implementing Recommendations of the 9D i rorninissiori Act of 2007 ; 
53 modified at 42 USU dOOOee-BV? 

NO 


bos If yes 


is mis a nations 

.NO 

Status of oyster 
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rv^riM. rkon n\ 


When was the s> slem/protect developed? 

NO [If no, proceed to next question (Is.3; 


V I N If yes. indicate which of the tenoning changes were involved (mark all 
changes that apply, ami provide brief explanation for each marked change); 


A change from information in a termer that .is anonymous or non- 
ideml liable to a loro tat. that N Identifiable to particular mate ornate 

A aevv tree of art i f system'protect, including application of a new 
technology, that changes hors information in identifiable tort a is managed. 

■ (or exampie. : a change that would create a more open environment and/or 
avenue for erpccwtv of data, that previously slid not exist.) 

A change that remits s;r inibrrnation in idemlfiahie harm being 
merged, centralized., or matched with other database a. 

A new method of aalh.enik.adrm the true of and access to 
information in identifiable forte by members of the public. 

A systematic incorporation of databases of information in 
Ideniidabie form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in 


A change that results in a new use or disclosure of Information it 
identiliabie term. 

A chanpst that results in stew hems of information In identifiable 
form being added into the system/protect. 

Changes do not Involve a change in the type of records maintain* 
tire individuals on whom memos are maintained, or tho use or 
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mu \r r^*\ si *>* \ao\^ 



la P1A 10 be gubhtshsd on FBi.GOV Aider stny RMO POiA redaction*?' _Yea. .No. 


_X _ Pi A ;* no? required tbr the iobownig rcnvonlY): 

System doc a ns>; collect, rousoiah;, or disseminate Pli. 

Syx?enr vs grandmthered (m ex/stonee before 40 7/2003; no later change* poring significant: nrreaey tasks). 
Puornrahon in ?.he system re later to interna! govesresrent operations. 

System tuts beers prevmusly assessed under art evaluation tnmrfar so a FI A. 

31 Other' 


Applicable SOR.Nta): Central Recor ds System, Ddli-ABI-OifS: Boreas; Personnel Managenretsi .Syyteriy.DQi/FB]-008;. 
C>;>n ourtar :yyytejyy Act;ly; ty ape; Access Re cords, DOJ -002.. 


Notify FBI RMD/R1DS per MIOG 190.2.3? _No X Yer-Nee eutopic EC on FO..U minuter webstte bete: 

hrtrt: vhontc/l.) i 3?Xe< IfFBlY'f.l i/F;'ivr-e;.CosooAOi.lrserttey' AOr.ihrarydornt for in:og:90-2-3 cc.wpd 




' s s \ '' " v ' ' ON S' N ' \ \ s- s v ' s ' \ ' s w X " U'O " The 

system ntay eonnstn Fedor;;.; records; whether or not h emtiaws; Privacy Ac? requests ansi, or any event, a ;coord* schedule 
v - v s tbjVo v, 'HA .o \ Xv v o ^ m s.nw v vh s' - .;<rp s v-. v f ^ s v 

^ " v _y~_ \ v v. N r x _ v.'' \ _-_ 

Other:: 


Acting FBi Privasty and Clvtl Liberties Officer_ j Piste Sig ned: ? ??/G C.eA\, X ? >• A v-mR/ ” 
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I. IA FORMATION ABOUT THE SYS TEM / PROJECT 


L Provide a genera! desert (dto» of the system or project that includes: (a) as me of 
the system, project, including' associated acronyms; (b) structure of the system. project, 
fttcladiag ?utercotmeclfon& with other projects or systems; (c) purpose of the 
system/projeet; id) nature of the information to the systemfproject and bow it will be 
used; fe) who will haye access to the Information to She sy&tem/project; (ft and. the 
mannes of transmission to all users. 

fh systems xsed y thePBftorna; xgeam. track ts supply ehs x processes Tor jurehasing v s 
"o ^ x, s,o mciuding esjsts on hand ,ve outdated one :nserJcAVt i o beUvt nrotage the l bi a 
C' vdne cambered assets. nee- s-xpph Jxaux managemem InnctxonaUtv ts tcijunexi, okluding - i} 
an saturated asset management system to value arid track assets throughout then use ft if live a {2} ao 
xpjo's i .I'silus to maoaue \endox t aoxaedoxts mxrt ( v t neo d au ...ahjctton doves-- t" • :u its 

The current asset rmmsgernerd systems iised by the FBI include the Property Management 
Applies Ism (PMA), the Vehicle Management Application CVMAh the Fixed Assets Module (f A> 

O' d 'issued Personal Property s'IPPt sworn Speckle mtbrm&tion and purpose ed'euch system ;s 
summarised below: 

“ “ “1 b7E 


INCLASSiFIEDAfTIRl 
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_The information is intended to be used, in conjunction with other data elements, to 

indirectly identify specific individuals. 

_ X_ The infomiatton can be used to distinguish or truce m individuals identity (he., it is 
linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4, 

None o f the above. If no ne of the abo ve, describe why the irdommbon does not 
identify specific individuals either directly or indirectly. 

4, Does the system/project pertain only to government employees, contractors, or 
consultants? 

I NO _YES 

The only information contained within this program that does not pertain to 
government employees, contractors, or consultants is in the case of a vehicle 
ace dent involv log an FBI vehicle and a non Hi! unto dual or vehicle. In the case 
of such an incident, the name mid contact information for the non-FBI individual 
would be maintained within the Vehicle Management files. 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved front the system/ptypeet by name or other personal identifier? 

__ NO. (If no, skip to question?,! 

X YES, (if yes, proceed to the next question.) 

6. Does the systctnfprojost collect any information directly from the person who is the 
subject of the information? 

. MO pf no, proceed to question 7.) 

X YES 


a. Does the systom/prqject support criminal, CT. orFCI investigations or 
assessments? 

X NO 

_ YES |ff yes, proceed m question 7.) 
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b. Arc subjects of ndbrnaahort front whom the inibnoafion A directly collected 
provided a written Privacy Act (e)(3) statement (cither on the collection form or via a 
separate notice)':' 

X NO (The program will need to work with POVU to dm^op/impkmerif 
the .necessary form(s)d 

Some of the forms have a Privacy Act (e)(3) statement but others do not so the 

' t * t t S t ) t , > , „ \ s t V.! 

YES Identify any forms, paper or eleeinmk, n«ed to request such 
information from the information subject-: 

7. Arc Social Security Numbers (SSNs) collected, rnamtained or diasem: rutted Horn the 
synteso/p earner? Full SSNs should only be need at: identifiers in limited instances 

NO X YES I f yes, cheek all thut apply: 


SSNs are necessary to esTtfoush/conlirm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 


system. 

„ OvS^tufv 

encrypted, hidden Iron: all users via a look-up table, or only available to certain 
ana Aesenhe: 

A unique asewauus and password are required for access re the Maximo program. Without 
approval, an FBI employee will be unable to access Maximo. Ail users are assignee specific 
roles commensunue with their job responsibilities and net all users will have access to the 
Pi! maiaOdned in Maxima. Where one's job responsibilities mmwu access ro view snother 
employee's Ph. the system wdl allow this. 

.It is nor feasible for the system/project to provide special protect ton to SSNs. 

Explain:: 

N is the system operated by a contractor? 

JX_ No 
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Yes. Information system operated by contractors Cor tiro FBI may bo 
considered Privacy Act systems of records The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates FII and additional.'requirements may he imposed 
as a matter of Department of Justice policy. Consultations with the Office of the 
Oeoeral Counsel may be required if a contractor Is operating the system for the FBI. 

9. ha* the sweet ns ale: sere Oembent.er A Act roe not; or V t\v V or tho 1 B. Neeums 

moo (geeDv: 

X NO If no, Indicate reason; If C&A is pending, provide anticipated 
completion date: This is a new system and is currently undergoing the 
the t\\ \ process. The anticipated completion date b mid-June 2011. 

_YES if yes, please Indicate the following, if known; 

Provide date of last €<§L4 eerdflcoflon/re~e«rtifieadon: 

Ciudldentialltyj Low_Moderate_High_Undefined 

Integrity: _Low Moderate _ High Undefined 

■Availability; _Low Moderate High Undefined 

Not applicable th-.y svstero outsnlv paper-based 

10. i, ixN n o o o}o,- dv ns v ^e “ fvp OMB V, b oeot k; v o i 1 

.NO 

JL.. IpKS if ves, please provide the date and name or 

title of the OMB submission; An OMB-eOO budget submission Is 
,der?v 4 rv ,>ubu.'xt wd sw \ 291 ' 

11. Does the s\ stem conduct dots mot my as defined . t See?; on S04 o; she Implementing 
Boom >. canons ct tv 9 CVrmmission C:C| X ' FI 10-53 \ j, cA 42 
CSC 2000ee-3>? 

„X_ NO 

_YES If yes, please describe the data mining Inaction: 

JiL.. NO _YES 
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Other {'Provide brief explanation): 
3. Does a PI A for this syste.nl/project already exist? 

..NO ..YES 



a. Provide date/title of the PI A: 

b. Has the system/project undergone any significant changes since the PIA? 

NO .YES 


i i NCLASStFtEIMEOR OE 
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UNCLASSIFIED 


FINAL FBI. AFPNOVaL / NEFF EMIN, 


CONBIT 


.PIA is reqnsmd by the BVmvernmesS: Act 

PI A n: to bo completed as a manor of FBI/DO.T d;screo< 
D PIA. to b« published on FBi.GOV Caber any KMD POiA r« 


X PIA ss no: rcurered for the ibiicnvrsg :easeo{s> 

jts System doe-> no- soikep rnaroCain, or disseminate PH. 

.System is grandfathered (its nan Nonce bchxc 4/17/200.V no later changes poring. og; 

fnlormarton in the system relates to infernal government operathms. 

System has Peon previously assessed under an evaluation similar to a FIA. 

No significant privacy issues (os' privacy issues are unchanged). 

Other (describe): 


Notify FBI RMlVRiPS per MtOG 190.2.3? No Yes-See earner: EC on ECU; intranet website hate: 


SOEN/SO.RN revn 


Prcparebevise/add Privacy Act (e)(3) siaremenrs ids' i'elatab forms" 1 


Yes (indicate (errs a site vied r 


RECORDS. The program, should consort with Roll.) to tdeD-fy Tssoive a;tv Federal reeordCdecirorne reervxis issues 
Toe system may contain Federal neeords whether or not it contains Privacy Act requests and, ;n any event, a records 
schedule apptxvved by toe National Archives and Records Administration is itecessary. RMD can provide advice on this 
its we ; I as no cornp ha nec with recinren-ams for Electronic Receadkeegusg; Cert; neafioo at;d any necessary updates. 




James J Landon, Deputy General Cotatsei 
FBI Privacy and Cob Liberties Officer 


oAt-rre; Y(. ,k" / y i: 

- v d 


UNCLASSIFIED 
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UNCLASSIFIED 

*\FORMATION \BOUT fUE SYSTEM‘PROJEC !' 

L IX <H Jig N v ,\ vvn\n'! v ^ , ' \x K Nv '\YX'' X \*!Lv<'m »> 

he system. jer s smc ed. ,. ^ h}s e*. > ©I e 

r „>' pi ojoco ifiuxv. is; tek ©ike* psonvn ssnukw, >>' 

purpose of the system/project; (4) nature of the Mammtkm is the sysrem/preject 
\m& bow it will fee ssed; {el wfea will have acme to tie iaibosaties is the 
; systenbprojeeU {!) pad the manner of irassabsslon to all Mere. 



2. Does the sysiem/projee? collect maintain. or disseminate any information about 
individuals ? e a human being or natural person, mgardiess of nationality}? 


X.NO | If so, STOP. The FT A Is sow complete and after division approval^) 

should be submitted is FBI C&IOPCLU for Stsd FBI approval. Unless yes are 
otherwise advised, so PIA is repaired.! 

_.YES |lf yes, please continue.) 

I oknbk 1 io an isdis eiua! 

(Check ail that apply.) 
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If'yon marked mf of the above, proceed to Question 4 

Nose of the above, it none of the above,, describe why 'be information does not 
dent \\ c k odd kamcukc docvfN ri „ ce \ N ten checked this boon 
STOP bore after providing the requested deseripilom j 

4. Does the aysfem/project pertain, only to government employees, contractors, or 
consultrmts? 

.NO ....._YES 

5. N rnfxmsiv rw'J 'r^, Str , cos o -• s o>" tod pc moon, a tOMdeo 
dkus retrieve Vo esyst pre x x o „ perso. ^ denti 

_NO, (If ao, skip to question 7.| 

.YES, |If yes, proceed to ike next question.,! 

6. Does the sysiem/prqject collect my ntonnauoo directly from the person who is the 
subject of die information; 

NO |If no, proceed to question 7>\ 

YES 

a 'do on -.no nn x ' no v \ oqqx n vrre s ,. e x ' o, «bt\ o 
assessments? 

..NO 

.YES [If yes ? proceed to question 7,j 


\ \ v >i old ov-e ; > \ n th x v t s n > 


UNCLASSIFIED 
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the aecessary form(s)J 


s m i\' s s \ s <h 

gnfarraai&tt from the information srsbjeet: 

7. Are Social. Security Numbers (SSHs) collected, maintained or disseminated from the 
system/prqfect? Full SSNs should ouly he used as identifiers m hndted instances 

NO .YES If yes, cheek all that apply: 


SSNs are necessary to estabbsh/eonllrrn the identity ofoableets, victims, 
wunesses or sources m this law vnibwemew or intelligence activity. 


.SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

.SSNs arc Important .tor other reasons. I>escribe:: 


_The sysfern/proieef provides special protection to SSNs (e.g,. SSNs are 

,, v m 'k su' s > U -v w s k>„t ' m s v 's ' ' ?' o v ! 

Oocoh 



SN\s f spuds: 


Y. Is the system operated by a contractor? 


considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that most be included in the event the system 

t N t v\0\ ! t N 1 < i t ! 1 1 <.;! V 

imposed as a matter of Department of Justice policy. Consultations with the 
Office of the Genera.! Coonses may he required if a contractor is operating the 
system for the FBI . 

Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecDt? 

\ G vs v ns r m \ s k ' .. 

completion date. 

._.YES If yes, please indicate the folfmvlng, if knonm 


UNCLASSIFIED 
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I NO.ASSinFJ) 


Fro'vkk ilsl.ii of last: C&A z*>riM<yMmir&~ctrtMz&timi 


C'ordldmilatityy. 

j,0'W 

Moderate... 

JMgli .... 

Umielioed 

Integrity; 

..LOW ... 

...Mode rate 
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UNCLASSIFIED 


10. Is fola aysiem/pmieet the subject of an GMB-300 budge? submission? 

NO 

YES If yes, please provide *he dale and name or 
tiite of tho 0MB submission: 

11. Does the system conduct data mining as defined in Section S04 of the 
Implementing Recommendations of the 9/11 Commission Act of 200'/, P.L. 1 10- 
S3 (codified at 42 lJSC 2o00ee~3i? 

NO 

YES If yes, please describe the data mining leneilom 

12. Is this a national security system (as determined by the SeeD)? 

.NO .YES 

m '\c '' «sV'. o o ,\ ci ' N'Non v hacked E'On Oi'vk, 

STOP, The FT A Is now complete and after division approval^} should be 
snbn.dtted to FBI OGCV'PC'LU for fkml EIM approval sod determination If 
PIA and/or tdber actions are required,| 


II, EXISTING S YSTEMS / PROTECTS 

I. ^ „ ‘'h s k i v, 

MO Of no, proceed to next question (IPS),] 


YES If yes, indicate which of the following changes were involved (mark nil 
changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system, 

A change from udormation in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

A new use of an IT system/prosnu, including application of a new 
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mewvm cvrdraimed, or rant chad aim other databases. 

A .new method of a when: wad ng the use of and access to 
information; in identifiable form by members of the public. 

\ v '$*d e-'f o c o' sloe i Aes oi t w 

nic; r form purchased or obmined from commercial or public 

\ s'n , image c\ oo s ecu k ^ on Nv 

nev. s so c\on.mcec o''mfbm\Hn ' n uietnnmKe toiw, 

A change that results in a new use or disclosure of iomtrnati 
sdent i liable form, 

A change thin results in new herns of etfcnriauoa in identiA 
form being added into the system/project. 

_Changes do not involve a change in the type of records main 

the individuals on whom records are maintained, or iheose nr 
dissemination of information from the syetem/project. 

Other f Provide brief e vplan ail on 1: 
s a PI A Sir this syslefn/prpject already exist? 

NO YES 


a. Provide date/dtte of the PIA: 

!' I vo the sy-'V-v progs t w? deny me any Signs ft cam changes since the Pl-\? 
.NO .YES 

|'The ETA is now complete and after division appreva!(s) should he snl.nn.dfed 
FBI OOC/FCMJ for final FBI approval and determination if PIA and/or other 
actions are required,} 
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(OGC/PCLU (Rev. 08/16/2010) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT: MP 2 

BIKR FBI Unique Asset ID: Not currently available 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name:! 1 

Name: 

Reason: 

Program Office: 

Phone: 

Declassify On: 

Division: FLSD 

Room Number: 


Phone! ! 



Room Number: 1B301 



FBI DIVISION INTERM EDIATE APPROVALS [complete as necessary consonant with Division policy] 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: ITSD 

Signature: 

Signature: 


Date signed: 11/30/2010 

Date signed: 11/30/2010 


Name:| i 

Name:| I 


Title: ITS 

Title: 

FBIHQ Division: 

Signature: 

Signature: 

[insert division name] 

Date signed: 

Date signed: 


Name: 

Name: 


Title: 

Title: 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEII 7350). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the 
following page.) 
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[INSERT CLASSIFICATION/CONTROL MASK!NGS, IF APPROPRIATE! 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will he completed by the FBI 

PCLU/PCLO following PTA submission. The FT A drafter should skip to the ssext page and continue.] _ 

_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 


_X_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

X Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

X No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): _ DQJ/FBI-002/classification for administrative matters _ 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No _Yes-See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? X N o _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No _Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. _ 

Other: 


, Deputy General Counsel Signature: Elizabeth Withnell 

FBI Privacy and Civil Liberties Officer _ Date Signed: 3/11/2011 _ 


LASSIFICATION/CO 


, IF APPROPRIATE] 
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[INSERT (. LASMFK CHOX/CONTROL MARKINGS, 

IP APPROPRIATE) 

I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that 
includes: (a) name of the system/project, including associated acronyms; (b) 
structure of the system/project, including interconnections with other 
projects or systems; (c) purpose of the system/project; (d) nature of the 
information in the system/project and how it will be used; (e) who will have 
access to the information in the system/project; (f) and the manner of 
transmission to all users. 


MP2 is a COTS database that collects information regarding building 


b6 

b7C 

b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person, regardless of nationality)? 

_NO [If no, STOP. The PTA is now complete and after division approval(s) 

should he submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required.) 

X YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. Employee names - those 
making a maintenance request or those performing the work - is the only PII maintained 
in this system. 

_ The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

[INSERT CLASSIFICATION/CONTROL MARKINGS, 

IF APPROPRIATE] 
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[INSERT i. LASMFK VnOT/CONTROL MARKINGS, 

IF APPROPRIATE} 

_ The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

_ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. [If you checked this item, 
STOP here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 


NO X YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7.] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

X NO [If no, proceed to question 7.] 

_YES 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

_YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

[INSERT CLASSIFICATION/CONTROL MARKINGS, 

IF APPROPRIATE] 
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HN'SERTi. LASMFK VnOT/CONTROL MARKINGS, 

IP APPROPRIATE] 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

X NO _YES If yes, check all that apply: 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 


_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

X No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PE and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_x_ NO If no, indicate reason; if C&A is pending, provide anticipated 

MP2 will be accredited under its parent operating system. 

_YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 

IINSE8TCLASSIFICA1TON7CONTROL MARKINGS, 

IF APPROPRIATE! 
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